About the role
Responsibilities:
- The Access Process Lead for SOX Controls plays a critical role within the Service Governance and Excellence Office at GCC.
- Accountable and responsible for guaranteeing the correct and timely execution of internal access management control reviews (approx. 100+) and for ensuring their quality before validation by appropriate control owners.
- Responsible for reviewing access management procedures every year by challenging control owners and/or advising on overall process design before the new SOX cycle.
- Responsible for managing a team of 4 to 5 people that will frequently execute control execution reviews.
- Responsible for identifying process weaknesses and improvements in access management areas by ensuring that risk analysis is conducted with an appropriate action plan and action owner defined.
- Provide his expertise as a previous auditor (if applicable) during audit execution by challenging findings or audit conclusions made by internal or external auditors before audit closing.
- Accountable for implementing and maintaining the respective tools (i. e., audit board, SharePoint planner, etc. ) for ALL-audit and SOX-related actions and to assign them in the tool to the respective calendar due dates (recurring in some cases) and responsible persons.
- Responsible for promoting and controlling that all GCC resources are getting training certifications on compliance topics (e. g., ITGC); in that perspective, he/she will organize complementary compliance trainings or lessons learned sessions that will contribute to improving the overall or specific maturity level of the GCC/Europe teams.
- Responsible for building and maintaining the inventory per application within his area of SOX-control owners, control reviewers, and control executors. He/she is also in charge of identifying and escalating to the respective SOX officer and application owners the availability of at least a primary and backup resource per item at any time.
- The Access Process Lead will be connected to all IT teams (based in India at the GCC or in Europe), will report to the Segment IT SOX Officer, and is a member of the Service Governance and Excellence Office at the GCC.
Requirements:
- 6-8 years of relevant experience as an IT auditor (if possible, as an internal auditor).
- Strong Knowledge of SAP Security and Authorizations.
- A background in IT engineering is a plus.
- Strong knowledge of ITGC/ITAC and GDPR.
- Knowledge of application/tool: SAP GRC, SAP IG, Pathlock, CSI AA, or SailPoint ARM.
- Project and Access management skills.
- Excellent understanding of IT applications, architecture, and systems.
- Excellent communication skills and the ability to propose dashboards, allowing the visualization of complex environments in a simple representation, highlighting key points requiring leadership attention.
- Assertiveness and ability to coordinate multicultural and multi-site teams of different levels.
- Excellent communication, negotiation, networking, and listening skills.
- Strategic mindset and problem-solving skills.
- Analytical mindset and creativity to seek and encourage innovation.
- Strong customer-oriented mindset and a real sense of emergency.